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Amendments to the Claims 
This listing of claims will replace all prior versions, and listings, of the claims: 

1. (currently amended) In a computer including hardware, a virtual machine monitor, and 
first and second operating system instances, a method comprising: 

using the virtual machine monito r rVMM) to expose the first operating system 
instance to a first hardware partition of the hardware and prevent the first operating 
system instance fi-om discovering a second hardware partitio n of the hardware : 

using the virtual machine monitor to expose the second operating system instance 
to the second hardware partition and prevent the second operating system instance from 
discovering the first hardware partition; and 

using the virtual machine monitor to share at least some of the hardware among 
the first and second operating system instance s that are booted on the VMM after the 
hardwmc is configured, wherein the VMM configures the hardwai'e so accesses to 
requested addresses by the first OS trap to the VMM, the traps occurring during resource 
discovery of memory installed and input/output (I/O) devices present by a booting 
operating system (OS) instance and the VMM responds to a trap by misinforming the 
booting OS instance about existence of hardware not in its partition . 

2. (original) The method of claim 1 , wherein the first and second partitions include 
different portions of memory. 

3. (original) The method of claim 1, wherein the first and second partitions include 
different I/O devices. 

4. (original) The method of claim 1, wherein the shared hardware includes a CPU. 

5. (original) The method of claim I , wherein the virtual machine monitor allows the first 
instance to have direct control over the first partition, and the second instance to have 
direct control over the second partition. 
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6. (canceled) 

7. (currently amended) The metliod of claim J.-4, wherein tlie virtual machine monitor 
uses memory management to partition VO devices. 

8. (original) The method of claim 7, wherein the VMM configures the hardware to trap to 
the VMM either when an access misses in a translation lookaside buffer, or when one of 
the operating system instances modifies its page table. 

9. (original) The method of claim 7, wherein the hardware is configured to treat physical 
addresses as virtual addresses, whereby the virtual machine monitor also uses memory 
management to trap accesses to physical addresses. 

10. (original) Ihe method of claim 9, wherein the hardware includes a CPU, and wherein 
the virtual machine monitor configures the CPU to disable direct accessibility of the 
physical memory, whereby the VMM can trap I/O and physical memory accesses. 

11 . (original) The method of claim 7, wherein using the memory management includes 
inspecting an address translation on a trap and modilying, accepting, or rejecting the 
translation. 

12. (original) The method of claim 7, wherein using the memory management includes 
inserting translations for I/O addresses into a translation lookaside buffer or page table. 

13. (original) The method of claim 12, wherein the virtual machine monitor grants 
unfettered access by an operating system instance to the range of physical memory 
covered by the translation entry in its translation lookaside buffer or page table. 



14. (canceled) 
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15. (original) The method of claim 1, wherein the virtual machine monitor modifies a 
hardware description table to expose and prevent discovery. 

16. (original) The method of claim 1, wherein the virtual machine monitor performs 
emulation to share hardware. 

17. (original) The method of claim 1, further comprising: 

delivering interrupts to interrupt handlers maintained by the first instance when 
the first instance accesses tlie first partition; and 

delivering interrupts directly to interrupt handlers maintained by the second 
instance when the second instance accesses the second partition. 

18. (original) The method of claim 1, wherein operation of the virtual machine monitor is 
transparent to the first and second operating system instances. 

19. (original) The method of claim 1, wherein the virtual machine monitor partitions 1/0 
devices bus-wise. 

20. (currently amended) In a computer including hardware, a virtual machine monitor 
running on the hardware, a method comprising: 

booting a plurality of operating syste m (OS) instances on the virtual machine 
monito r (VMM) : 

using the virtual machine monitor to expose each of the booting operating system 
instances to its own partition and to prevent each of the operating system instances from 
discovering other hardware partitions; and 

using the virtual machine monitor to share at least some of the hardware among 
the operating system instances; 

wherein operation of the virtual machine monitor is transparent to the plurality of 
operating system instances , wherein the VMM configures the hardware so accesses to 
addresses requested by the OS trap to the VMM, the traps occur during resource 
discovery of memory installed and input/output (I/O) devices present by the booting OS 
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instance, and the VMM responds to a trap by misinforming the booting OS instance 
about an existence of hardware not in its partition, and wherein the first and second 
instances are booted on the VMM after the hardware is configured . 

2 1 . (canceled) 

22. (original) The method of claim 20, wherein the hardware includes a CPU, and 
wherein the virtual machine monitor can configure the CPU to disable direct accessibilit>' 
of the physical memory, whereby the VMM can trap I/O and physical memory accesses. 

23. (original) The method of claim 20, wherein the virtual machine monitor uses memory 
management to partition I/O devices, the memory management including inspecting an 
address translation on a trap and modifying, accepting, or rejecting the translation. 

24. (original) The method of claim 20, wherein the virtual machine monitor uses memory 
management to partition 1/0 devices, the memory management including inserting 
translations for 1/0 addresses into a translation lookaside buffer or page table. 

25. (original) The method of claim 24, wherein the virtual machine monitor grants 
unfettered access by an operating system instance to the range of physical memory 
covered by the translation entry in its translation lookaside buffer or page table. 

26. (canceled) 

27. (original) The method of claim 20, wherein the virtual machine monitor modifies a 
hardware description table to expose and prevent discovery. 

28. (original) The method of claim 20, wherein the virtual machine monitor partitions I/O 
devices bus-wise. 

29. (currently amended) A computer comprising: 



5 



Application No. 10/676,921 
Response to Final OA of 1 1/16/2007 

memory for storing a virtual machine monito r fVMMl a first operating system 
(OS), and a second OS operating syst e m ; 

a processor for running th e VM M virtual machin e monitor and first and second 
OS op e rating sy s tem instances on th e VM M virtual machin e monitor ; 

th e VMM virtual machin e monitor designed to expose a first OS operating svst e n 
instance to a first hardware partition and prevent the first OS op e rating system instance 
from discovering a second hardware partition; 

th e VMM virtual machine monitor designed to expose a second OS operating 
syst e m instance to the second hardware partition and prevent the second ^ op e rating 
syst e m instance from discovering the first hardware partition; 

the VM M virtual machine monitor designed to allow at least some hardware 
sharing among the first and second OS operating syst e m instance s, wherein the VMM 
configures hardvyare so accesses to requested addresses by the first OS trap to the VMM, 
the traps occur during resource discover>^ of memory installed and input/output (I/O) 
devices present bv the booting OS instance, and the VMM responds to a trap by 
misinforming the booting OS instance about an existence of hardware not in its partition, 
and wherein the first and second instances are booted on the VMM after the hardware is 
configured. 



30. (currently amended) A computer for running first and second operating syste m (OS) 
instances, the computer comprising hardware including memory, the memoiy encoded 
with a virtual machine monito r (VMM) for exposing the first OS op e rating syst e m 
instance to a first partition of the hardware and preventing the first OS oporating system 
instance from discovering a second partition of the hardware; exposing the second OS 
oporating system instance to the second hardware partition and preventing the second OS 
operating system instance from discovering the first hardware partition; and sharing at 
least some of the hardware among the first and second OS op e rating s> st e m instances that 
are booted on the VMM after the hardware is configured, wherein tlie VMM configures 
the hardware so accesses to requested addresses bv the first OS trap to the VMM, the 
trans occur during resource discovery of memon^ installed and input/output (I/O) devices 
present bv the booting OS instance, and the VMM responds to a trap by misinforming the 
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booting OS instance about an ex istence of the hardware not in its partition . 

31. (canceled) 

32. (original) The computer of claim 30, wherein the hardware includes a CPU, and 
wherein the virtual machine monitor can configure the CPU to disable direct accessibility 
of the physical memory, whereby the VMM can trap 1/0 and physical raeraor)' accesses. 

33. (original) The computer of claim 30, wherein the virtual machine monitor can use 
memory management to partition I/O devices, the memory management including 
inspecting an address translation on a trap and modifying, accepting, or rejecting the 
translation. 

34. (original) The computer of claim 30, wherein the virtual machine monitor can use 
memory management to partition 1/0 devices, the memory management including 
inserting translations for I/O addresses into a translation lookaside buffer or page table. 

35. (canceled) 

36. (original) The computer of claim 30, wherein the virtual machine monitor can modify 
a hardware description table to expose and prevent discover)'. 

37. (original) The computer of claim 30, wherein the virtual machine monitor can 
partition I/O devices bus-wise. 

38. (currently amended) An article for a computer, the article comprising computer 
memory encoded with a virtual machine monito r (VMM) for exposing a first operating 
system (OS) instance to a first hardware partition and preventing the first ^ op e rating 
system instance from discovering a second hardware partition: exposing a second_OS 
operating system instance to the second hardware partition and preventing the second OS 
operating system instance from discovering the first hardware partition; and sharing at 
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least some of the hardware among the first and second.OS oporating syst e m instance s that 
are booted on the VMM after the hardware is configu red, wherein the VMM configures 
the hardware so accesses to requested addresses by the first OS trap to the VMM, the 
traps occur during resource discovery ofmemors' installed and input/output (I/O) devices 
present by the booting OS instance, and the VMM responds to a trap by misinforming the 
booting OS instance about an existence of the hardware not in its partition . 

39. (canceled) 

40. (original) The article of claim 38, wherein the hardware includes a CPU, and wherein 
the virtual machine monitor can configure the CPU to disable direct accessibility of the 
physical memory, whereby the VMM can trap I/O and physical memory accesses. 

41 . (original) The article of claim 38, wherein the virtual machine monitor can use 
memory management to partition I/O devices, the memory management including 
inspecting an address translation on a trap and modifying, accepting, or rejecting the 
translation. 

42. (original) The article of claim 38, wherein the virtual machine monitor can use 
memory management to partition I/O devices, the memory management including 
inserting translations for I/O addresses into a translation lookaside buffer or page table. 

43. (canceled) 

44. (original) The article of claim 38, wherein the virtual machine monitor can modify a 
hardware description table to expose and prevent discovery. 



45. (original) The article of claim 38, wherein the virtual machine monitor can partition 
I/O devices bus-wise. 



